Skip to main content
Azure - FinOps Platform

Governance & Policy Compliance

Tagging coverage —Subscription-wide, all required tag keys Share of resources carrying every configured required tag key — a subscription-wide rollup of the same data Resource Graph Checks breaks down per resource group.
Note

A low share is a governance gap, not a cost problem by itself — drill into Resource Graph Checks to see which resource groups are missing tags.

Policy compliance rate 100%8 policy state(s) evaluated Share of the latest Azure Policy evaluation states that are Compliant, across every policy assignment applied to this subscription.
Note

Trace a non-compliant result to its exact assignment, definition, and resource on the Policy Compliance tab.

Broad role assignments 0Subscription-scope Owner or Contributor grants Count of subscription-scope role assignments granting Owner or Contributor — a review signal, not automatically inappropriate.
Note

See RBAC & Access Review for who holds each one before treating this as an issue on its own.

Summarizes sourced governance signals for the configured subscription; it does not certify the environment.